$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa File: 8e4dd47d-f85d-3a05-a50d-302566ef5337.roa (raw, json) Hash identifier: E7QTh3Hj3bxG6Bg+XLPpZ6kHBKhJz3bbiMTENrb1B8s= Subject key identifier: 8C:BC:4C:0C:3D:C8:C6:78:21:E0:04:8D:C5:5A:F0:C8:02:5D:59:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A4AD599726ADA6F66A82B8CDC Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 66.237.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:99:72:6a:da:6f:66:a8:2b:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=d478f43a-b655-434d-8191-b7ad23e4b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:aa:dc:8f:37:21:03:ff:f1:55:77:7e:a0: f4:8a:02:7b:64:17:fb:9d:51:e3:06:79:68:47:52: 33:1a:32:e0:ce:17:84:d7:f7:6d:8e:df:9e:6b:ac: 5e:ff:b0:1b:21:61:ec:ea:70:97:a1:9c:2d:78:b8: 6f:aa:20:d6:40:be:d2:40:69:f6:64:18:3c:26:9c: 23:0c:65:60:b8:ba:05:3c:70:f7:34:d9:73:04:f9: 4a:26:8d:80:e5:60:6b:c3:a4:30:f4:29:88:f7:86: 82:63:c7:2e:db:ef:8b:0f:d3:d2:82:e5:38:ca:4b: 1b:12:cf:2e:64:db:e6:e6:e4:e9:4f:25:af:c8:41: d8:a1:54:ed:ff:a1:22:66:9e:97:45:19:59:d7:7d: 49:da:91:ed:0e:03:a7:52:2a:9a:cc:1e:30:fe:a3: bb:11:fc:64:d5:a5:84:69:65:46:9a:be:fa:95:0a: 19:c0:e9:a8:fd:68:c1:7f:63:6f:a7:b9:25:fa:d0: d9:86:49:45:81:07:09:4d:45:49:1b:18:c1:10:3c: 24:9c:f5:54:14:b6:d5:a3:c4:9d:0e:22:0f:82:8f: 81:0c:03:b6:1a:37:b9:03:19:a7:df:b6:ad:e0:36: 96:6e:19:1e:45:52:e8:94:ea:48:c6:2b:76:18:3d: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BC:4C:0C:3D:C8:C6:78:21:E0:04:8D:C5:5A:F0:C8:02:5D:59:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e4dd47d-f85d-3a05-a50d-302566ef5337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 66.237.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:83:4c:58:f8:55:c9:f2:8d:1d:4f:cf:c8:10:bb:ae:25:49: 06:b1:2d:9e:7f:30:88:48:ef:38:80:fc:1c:35:ab:a5:73:bf: b5:00:dc:e5:66:54:ef:99:dd:8f:43:bb:64:0c:8d:08:28:19: ae:6d:43:38:c8:68:fe:a2:46:9b:98:76:81:3a:f8:9d:ae:82: a6:62:d1:b2:f3:fc:9a:a8:da:6d:c4:cb:eb:1f:10:c3:94:d3: a5:51:58:b3:fb:eb:eb:52:b0:80:95:cd:dd:78:75:53:4c:ab: bd:29:f7:de:4e:f0:4a:dd:66:4a:39:18:d0:45:68:d2:d1:f5: 51:96:0b:d1:28:0e:d7:b7:3d:67:7a:b1:39:80:68:88:fd:da: ce:25:6d:5d:c9:35:8f:35:92:04:5c:54:d5:09:48:cc:51:30: 37:04:57:d9:28:16:14:22:1d:13:ea:a4:da:96:b4:12:08:c7: 3f:2e:eb:16:b3:3a:a2:bc:23:c1:41:25:c9:d0:ed:e0:c5:3e: e3:34:70:15:f6:ab:1c:e7:58:99:8a:d6:d0:bb:ee:3b:0e:66: e9:67:4f:cd:ee:55:3f:2b:76:45:2b:a6:6a:18:26:9d:13:59: f6:47:10:9e:1c:78:be:fd:8f:32:f5:b9:8e:5d:fc:da:a8:88: c3:a1:a4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZlyatpvZqgrjNwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZDQ3OGY0M2EtYjY1NS00MzRkLTgxOTEtYjdhZDIzZTRiNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwuq3I83IQP/8VV3fqD0igJ7ZBf7nVHjBnlo R1IzGjLgzheE1/dtjt+ea6xe/7AbIWHs6nCXoZwteLhvqiDWQL7SQGn2ZBg8Jpwj DGVguLoFPHD3NNlzBPlKJo2A5WBrw6Qw9CmI94aCY8cu2++LD9PSguU4yksbEs8u ZNvm5uTpTyWvyEHYoVTt/6EiZp6XRRlZ131J2pHtDgOnUiqazB4w/qO7Efxk1aWE aWVGmr76lQoZwOmo/WjBf2Nvp7kl+tDZhklFgQcJTUVJGxjBEDwknPVUFLbVo8Sd DiIPgo+BDAO2Gje5Axmn37at4DaWbhkeRVLolOpIxit2GD1djQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy8TAw9yMZ4IeAEjcVa8MgCXVmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGU0ZGQ0N2QtZjg1ZC0z YTA1LWE1MGQtMzAyNTY2ZWY1MzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQu1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyDTFj4VcnyjR1Pz8gQu64lSQaxLZ5/MIhI7ziA/Bw1q6Vzv7UA3OVm VO+Z3Y9Du2QMjQgoGa5tQzjIaP6iRpuYdoE6+J2ugqZi0bLz/Jqo2m3Ey+sfEMOU 06VRWLP76+tSsICVzd14dVNMq70p995O8ErdZko5GNBFaNLR9VGWC9EoDte3PWd6 sTmAaIj92s4lbV3JNY81kgRcVNUJSMxRMDcEV9koFhQiHRPqpNqWtBIIxz8u6xaz OqK8I8FBJcnQ7eDFPuM0cBX2qxznWJmK1tC77jsOZulnT83uVT8rdkUrpmoYJp0T WfZHEJ4ceL79jzL1uY5d/NqoiMOhpNk= -----END CERTIFICATE-----Generated at Sun Jun 29 16:52:33 2025 by rpki-client